Skip to content

Attestation

Version
v1 · 2026-08-24 · History
Prime #
643
Origin domain
Law & Governance
Subdomain
instruments of proof → Law & Governance

Core Idea

A verifiable, principal-binding, tamper-evident mark applied to a specific artifact, such that a third party can later confirm — without trusting the signer or the holder — who committed to what, and that the artifact is unaltered since the mark was applied.

How would you explain it like I'm…

The Wax Seal

A wax seal stamped on a letter shows who sent it and proves nobody opened it on the way. If someone breaks the seal, you can tell right away. So even a stranger can trust the letter without knowing the person who sent it.

The Unfakeable Mark

Attestation is putting a special, hard-to-fake mark on something so that later, anyone can check three things at once: who promised it, what they promised, and that it hasn't been changed since. A wax seal, a signature with a witness, a hallmark stamped into gold, or a digital signature all do this. The clever part is that you don't have to trust the person who made the mark or the person holding it — you check the mark itself against something everyone agrees on, like a known stamp or key. If the thing was altered after the mark went on, the check fails and you can see it.

Tamper-Evident Binding

Attestation is the pattern where a verifiable, identity-binding, tamper-evident mark is applied to an artifact, so that a third party can later confirm — without trusting the signer or the holder — who committed to what, and that the artifact hasn't been altered since the mark was applied. The defining commitment is binding an identity to a specific artifact in a way that travels: the marked artifact can move across owners, time, and contexts, and the mark stays checkable against a publicly known trust anchor. Three guarantees ride along with every attestation. Authenticity: only the bound party could have produced this mark for this artifact (or forging it is detectably hard). Integrity: any change to the artifact after marking is detectable by checking the mark against it. And public verifiability: anyone with the artifact, the mark, and the trust anchor can verify the binding without trusting the signer or receiver. It's substrate-independent — wax seals, hallmarks, audit opinions, and digital signatures are all the same shape.

 

Attestation is the structural pattern by which a verifiable, principal-binding, tamper-evident mark is applied to an artifact, such that a third party can later confirm — without trusting the signer or the holder — three things at once: who committed to what, and that the artifact has not been altered since the mark was applied. The defining structural commitment is the binding of an identity to a specific artifact in a way that travels: the artifact carrying its mark can move across custody chains, time, and verification contexts, and the mark remains evaluable against a publicly checkable trust anchor. Three guarantees travel with every attestation. Authenticity: only the bound principal could have produced this mark for this artifact, or producing it without authority is detectably hard. Integrity: modification of the artifact after attestation is detectable by inspecting the mark against the artifact. Public verifiability: a third party with access to the artifact, the mark, and the trust anchor can check the binding without trusting either the signer or the receiver. The pattern is substrate-independent and predates the digital era by millennia. Wax seals on dispatches, signet rings, notarial acts under jurat, witnessed signatures, hallmarks on precious metals, holograms on banknotes, watermarks in paper, peer-review badges, audit opinions on financial statements, blockchain inclusion proofs, and modern digital signatures all instantiate the same shape: a principal, an artifact, a binding mechanism, a tamper-evidence property, a trust anchor, and a third-party-evaluable verification procedure. What changes across substrates is the binding mechanism and the anchor; the structural skeleton does not.

Broad Use

  • Law and diplomatics: Wax seals, notarised signatures, apostilles, and witnessed wills bind a person to a document.
  • Science: Citations, peer-review badges, and preregistration timestamps bind an author to a claim.
  • Finance and audit: A partner-signed audit opinion attests that a stated standard was applied.
  • Cryptography: Digital signatures and X.509 certificate chains bind a key-holder to data.
  • Supply chains: Hallmarks on gold, certificates of origin, and pharmaceutical serialisation bind provenance to goods.
  • Software: Code signing and build-provenance attestations bind a binary to its source revision.

Clarity

It separates the binding — this artifact, by this principal, unaltered — from everything else the artifact might be evaluated for, such as truth, fitness, or ongoing validity.

Manages Complexity

It collapses a catalogue of seals, signatures, certificates, and hallmarks into one object — a binding against an anchor with tamper-evidence — with one maintenance discipline focused on the anchor.

Abstract Reasoning

It supports a three-place model — principal bound to artifact against an anchor — whose failure modes (key compromise, anchor compromise) and recovery moves (revocation, rotation, re-attestation) are substrate-portable.

Knowledge Transfer

  • Cryptography to audit: Transparency logs and key rotation port into firm rotation and conflict disclosure.
  • Notarial practice to software: Witness requirements and register-keeping port into signed-build hygiene and key custody.
  • Universally: The anchor is the standing weak point everywhere; the recurring task is to keep it uncompromised and ready to rotate.

Example

A notary's seal attests only that a particular person signed a particular deed on a particular date — it does not certify that the grantor owns the property or that the contents are true.

Relationships to Other Abstractions

Local relationship map for AttestationParents appear above the current abstraction, mutual partners to the right, and children below. Node labels state whether each abstraction is prime or domain-specific; colors identify relation types.AttestationPRIMEPrime abstraction: Authentication — is a kind ofAuthenticationPRIMEPrime abstraction: Provenance — is part of, conditionalProvenancePRIMEDomain-specific abstraction: Digital signature — is a kind ofDigitalsignatureDOMAIN

Current abstraction Attestation Prime

Parents (1) — more general patterns this builds on

  • Attestation is a kind of Authentication Prime

    Attestation binds identity to evidence via a verifiable tamper-evident mark, which is exactly authentication's evidence-binding structure specialized to non-repudiable marks.

Children (2) — more specific cases that build on this

  • Digital signature Domain-specific is a kind of Attestation

    A Digital Signature is Attestation implemented with a private-key mark, public-key trust anchor, message digest, and deterministic public check.

  • Provenance Prime is part of, conditional Attestation

    Provenance contains Attestations when point-in-time principal-and-artifact bindings secure links in its multi-step history.

    Condition / exception The provenance history records transfers or transformations through verifiable principal-and-artifact bindings.

Hierarchy path (1) — routes to 1 parentless root

Not to Be Confused With

  • Attestation is not Data Integrity because attestation binds a principal to content with public verifiability against an anchor, whereas data integrity is only the bare property that content has not changed.
  • Attestation is not Verification because attestation is the architecture (mark plus anchor) that makes a binding checkable, whereas verification is the act a party performs on an attestation.
  • Attestation is not Provenance because attestation is a point-in-time binding of one principal to one artifact, whereas provenance is the full documented chain of custody.